Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
398,724 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-2026-79883 | 8.3 High | Unauthenticated Adjacent Buffer Overflow Vulnerability in the PAPI Protocol leads to Sensitive Information Disclosure in AOS-10 | Oct 22, 2026 |
| CVE-2026-79882 | 8.3 High | Unauthenticated Adjacent Command Injection Vulnerability in the PAPI Protocol of AOS-10 | Oct 22, 2026 |
| CVE-2026-79881 | 8.5 High | Authentication Bypass Leading to Remote Code Execution in AOS-8 | Oct 22, 2026 |
| CVE-2026-79880 | 8.7 High | Authenticated Server-Side Request Forgery leads to Remote Code Execution in AOS-8 | Oct 22, 2026 |
| CVE-2026-79879 | 8.8 High | Unauthenticated Adjacent Memory Corruption Vulnerabilities lead to Remote Code Execution in AOS-10 | Oct 22, 2026 |
| CVE-2026-79878 | 8.8 High | Unauthenticated Adjacent Command Injection Vulnerability in the AOS-8 Command Line Interface Accessed by the PAPI Protocol | Oct 22, 2026 |
| CVE-2026-79877 | 8.8 High | Unauthenticated Adjacent Remote Code Execution Vulnerability in AOS-10 | Oct 22, 2026 |
| CVE-2026-79876 | 9.3 Critical | Unauthenticated Adjacent Sensitive Information Disclosure in AOS-10 Wi-Fi Frame Processing | Oct 22, 2026 |
| CVE-2026-79875 | 9.3 Critical | Authentication Bypass in the PAPI Protocol of AOS-8 Allows Unauthorized Administrative Access | Oct 22, 2026 |
| CVE-2026-79874 | 9.3 Critical | Authentication Bypass in the API allows Administrative Access of AOS-10 | Oct 22, 2026 |
| CVE-2026-79873 | 9.3 Critical | Unauthenticated Adjacent Authentication Bypasses in the PAPI Protocol of AOS-10 Leads to Unauthorized Administrative Access | Oct 22, 2026 |
| CVE-2026-79872 | 9.4 Critical | Unauthenticated Buffer Overflow Vulnerability allows Remote Code Execution in AOS-10 and AOS-8 | Oct 22, 2026 |
| CVE-2026-79871 | 9.6 Critical | Unauthenticated Sensitive Information Disclosure in the Command Line Interface of AOS-10 | Oct 22, 2026 |
| CVE-2026-79870 | 9.6 Critical | Authentication Bypass leads to Unauthorized Access in AOS-8 | Oct 22, 2026 |
| CVE-2026-79869 | 9.6 Critical | Authentication Bypass Leading to Remote Code Execution in AOS-10 | Oct 22, 2026 |
| CVE-2026-79868 | 9.6 Critical | Authentication Bypass Vulnerabilities lead to Complete System Compromise in AOS-8 | Oct 22, 2026 |
| CVE-2026-79867 | 9.6 Critical | Authentication Bypass Leading to Remote Code Execution in AOS-8 | Oct 22, 2026 |
| CVE-2026-79866 | 9.6 Critical | Unauthenticated Adjacent Path Traversal Vulnerability leads to Filesystem Compromise in AOS-8 | Oct 22, 2026 |
| CVE-2026-79865 | 9.6 Critical | Unauthenticated Adjacent Memory Corruption Vulnerability leads to Remote Code Execution in AOS-10 | Oct 22, 2026 |
| CVE-2026-79864 | 9.6 Critical | Unauthenticated Adjacent Command Injection Vulnerability in AOS-10 | Oct 22, 2026 |
| CVE-2026-79863 | 9.6 Critical | Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution | Oct 22, 2026 |
| CVE-2026-79862 | 9.6 Critical | Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution | Oct 22, 2026 |
| CVE-2026-79861 | 9.8 Critical | Unauthenticated Command Injection Vulnerability in the PAPI Protocol of AOS-10 | Oct 22, 2026 |
| CVE-2026-79860 | 9.8 Critical | Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8 | Oct 22, 2026 |
| CVE-2026-79859 | 9.8 Critical | Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8 | Oct 22, 2026 |
| CVE-2026-79858 | 9.8 Critical | Unauthenticated SQL Injection Vulnerability in the PAPI Protocol of AOS-8 | Oct 22, 2026 |
| CVE-2026-79857 | 9.8 Critical | Unauthenticated Command Injection Vulnerability in AOS-8 PAPI Protocol | Oct 22, 2026 |
| CVE-2026-79856 | 9.8 Critical | Unauthenticated Buffer Overflow Vulnerability leads to Authentication Bypass in AOS-8 | Oct 22, 2026 |
| CVE-2026-79855 | 9.8 Critical | Authentication Bypass in the SSH Daemon of AOS-8 leads to Complete System Compromise | Oct 22, 2026 |
| CVE-2026-79854 | 9.8 Critical | Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in AOS-10 | Oct 22, 2026 |
| CVE-2026-79853 | 9.8 Critical | Unauthenticated Sensitive Information Disclosure leads to Remote Code Execution in AOS-10 | Oct 22, 2026 |
| CVE-2026-79852 | 9.8 Critical | Unauthenticated SQL Injection allows Remote Code Execution in AOS Web-Based Management Interface | Oct 22, 2026 |
| CVE-2026-79851 | 10.0 Critical | Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10 | Oct 22, 2026 |
| CVE-2026-79850 | 10.0 Critical | Authentication Bypass Leading to Remote Code Execution in AOS-8 | Oct 22, 2026 |
| CVE-2026-79849 | 10.0 Critical | Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8 | Oct 22, 2026 |
| CVE-2026-79848 | 10.0 Critical | Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8 | Oct 22, 2026 |
| CVE-2026-79847 | 10.0 Critical | Unauthenticated Buffer Overflow Vulnerabilities leads to Remote Code Execution in AOS-10 | Oct 22, 2026 |
| CVE-2026-79846 | 10.0 Critical | Unauthenticated Command Injection Vulnerabilities in AOS-8 | Oct 22, 2026 |
| CVE-2026-79844 | 10.0 Critical | Authentication Bypass Leading to Remote Code Execution in AOS-10 | Oct 22, 2026 |
| CVE-2026-115414 | 8.4 High | OS command injection in the Terraform hook in AWS SAM CLI | Oct 22, 2026 |
| CVE-2026-114613 | 7.5 High | MessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failure | Oct 22, 2026 |
| CVE-2026-115519 | 2.1 Low | Sensitive cookies without 'Secure' and 'HttpOnly' attributes in KNIME Business Hub | Oct 22, 2026 |
| CVE-2026-115517 | 6.4 Medium | Unrestricted network access between execution contexts in KNIME Business Hub | Oct 22, 2026 |
| CVE-2026-114612 | 9.9 Critical | LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key | Oct 22, 2026 |
| CVE-2026-113876 | 5.3 Medium | SmileCDR HAPI FHIR unauthorized read | Oct 22, 2026 |
| CVE-2026-113875 | 2.3 Low | SmileCDR HAPI FHIR unauthorized read via subscription | Oct 22, 2026 |
| CVE-2026-113874 | 8.6 High | SmileCDR HAPI FHIR trusted tenant partition override | Oct 22, 2026 |
| CVE-2026-113873 | 8.7 High | SmileCDR HAPI FHIR improper data decompression | Oct 22, 2026 |
| CVE-2026-97635 | 8.6 High | Agent Zero Web UI XSS | Oct 22, 2026 |
| CVE-2026-77157 | 6.3 Medium | ast-cli: Auto-update downloads are not verified against a checksum before execution | Oct 22, 2026 |
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.